CVE-2025-68580

WordPress Advanced Classifieds & Directory Pro plugin <= 3.2.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in pluginsware Advanced Classifieds & Directory Pro advanced-classifieds-and-directory-pro allows Cross Site Request Forgery.This issue affects Advanced Classifieds & Directory Pro: from n/a through <= 3.2.9.

We have discovered 372 live websites that are affected by CVE-2025-68580.

Run a Free Instant Scan



Affected Software

Product  Advanced Classifieds And Directory Pro
Category Wordpress Plugins
Vulnerable Domains372 live websites (80% of Advanced Classifieds And Directory Pro install base)
Vulnerable Versions
  • from 0 through 3.2.9
Vulnerable Versions Count26 versions ( 93% of all versions)



Details

  • Published - Dec 24, 2025
  • Updated - Jan 20, 2026

Credits

  • Nabil Irawan | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2025-68580
United States50 websites


Poland185 websites
Germany26 websites
GB16 websites
France12 websites
Italy9 websites
Russia8 websites
Spain7 websites
South Africa5 websites
Australia5 websites

Website Distribution by TLD

Number of websites using CVE-2025-68580
.pl148 websites
.com70 websites
.de19 websites
.co.uk9 websites
.org8 websites
.ru7 websites
.it6 websites
.com.br5 websites
.net4 websites
.com.au4 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2025-68580

Top websites that are affected by CVE-2025-68580. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.com Canada**,***
*****.com GB***,***
*************.com United States***,***
***************.com United States*,***,***
**********.com United States*,***,***
**************.de Germany*,***,***
*************************.com GB*,***,***
**********.org United States*,***,***
************************.de Germany*,***,***
**************.com United States*,***,***
See full domain list

FAQ

A total of 372 websites have been identified as vulnerable to CVE-2025-68580, based on global website indexing conducted by WebTechSurvey.
The Advanced Classifieds And Directory Pro is affected by the CVE-2025-68580 vulnerability.
Advanced Classifieds And Directory Pro versions up to and including 3.2.9 are vulnerable to CVE-2025-68580.